IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Beats version 8.4.0
editBeats version 8.4.0
editBreaking changes
editHeartbeat
- Browser monitors (beta) now write to the synthetics-*
index prefix. 32064
- Setting a custom index for a given monitor is now deprecated. Streams are preferred. 32064
- Browser monitors now default to a max concurrency of two. 32564
Bugfixes
editAffecting all Beats
Auditbeat
Filebeat
Heartbeat
- Send targetted error message for unexpected synthetics exits. 31936
- Reduced memory usage slightly for browser monitors. 32317
- Automatically kill zombie-ish node processes. 32393
- Added timeout for browser monitors. 32434
- Fix bug with browser jobs that had missing check groups or sent empty events. 32542
Metricbeat
- Update Kubernetes apiserver metricset to not collect deprecated metrics and fix dashboard. 31973
- Check for nil metadata in GCP. 32281
- Update Kubernetes controllermanager metricset to not collect deprecated metrics and fix dashboard. 32037
- Fix ARN parsing for Cloudwatch resource names with leading slashes. 32358
- Fix an infinite loop in AWS billing metricset. 32626
- Add missing metrics in AWS Transit Gateway module 32617
- Replace internal expiring cache used by the Kubernetes module with in-memory dictionary. 32539
- Oracle Module: Refactor module to use existing host parsers instead of doing its own parsing of hosts. 31611 #31692
- Oracle Module: Correctly handle special characters in the connection string. 24609 #31368
Winlogbeat
Added
editAffecting all Beats
- Improve performance of disk queue by coalescing writes. 31935
Auditbeat
Filebeat
-
Add
auth.oauth2.google.jwt_json
option tohttpjson
input. 31750 - Add authentication fields to RabbitMQ module documents. 31159 31680
- Add template helper function for decoding hexadecimal strings. 31886
-
Add new
parser
calledinclude_message
to filter based on message contents. 31794 32094 - Extend list of mapped record types in o365 Audit module. 32217
- Add references for CRI-O configuration in input-container and in our Kubernetes manifests. 32149 32151
-
httpjson input: Add
replaceAll
helper function to template context. 32365 - Optimize grok patterns in system.auth module pipeline. 32360
- Checkpoint module: add authentication operation outcome enrichment. 32230 32431
- Add documentation for decode_xml_wineventlog processor field mappings. 32456
Metricbeat
Packetbeat